Vulnerabilities > CVE-2023-24510 - Improper Handling of Exceptional Conditions vulnerability in Arista EOS

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

arista

CWE-755

NVD

Published: 2023-06-05

Updated: 2023-06-20

Summary

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

Vulnerable Configurations

Part	Description	Count
OS	Arista Arista EOS - Arista EOS 4.12 Arista EOS 4.13 Arista EOS 4.14 Arista EOS 4.15 Arista EOS 4.15.3F Arista EOS 4.16 Arista EOS 4.16.6M Arista EOS 4.16.7M Arista EOS 4.16.8M Arista EOS 4.16.9M Arista EOS 4.16.10M Arista EOS 4.16.11M Arista EOS 4.16.12M Arista EOS 4.16.13M Arista EOS 4.17 Arista EOS 4.17.0 Arista EOS 4.17.0F Arista EOS 4.17.1.1F Arista EOS 4.17.1.4F Arista EOS 4.17.1F Arista EOS 4.17.2.1F Arista EOS 4.17.2F Arista EOS 4.17.3F Arista EOS 4.17.4M Arista EOS 4.17.5.1M Arista EOS 4.17.5M Arista EOS 4.17.6M Arista EOS 4.17.7M Arista EOS 4.17.8M Arista EOS 4.18 Arista EOS 4.18.0F Arista EOS 4.18.1.1F Arista EOS 4.18.1F Arista EOS 4.18.2.1F Arista EOS 4.18.2F Arista EOS 4.18.3.1F Arista EOS 4.18.3F Arista EOS 4.18.4.1F Arista EOS 4.18.4.2F Arista EOS 4.18.4F Arista EOS 4.19 Arista EOS 4.19.4M Arista EOS 4.20 Arista EOS 4.20.1 Arista EOS 4.20.1F Arista EOS 4.20.2F Arista EOS 4.20.4.1 Arista EOS 4.20.5 Arista EOS 4.20.5F Arista EOS 4.20.15 Arista EOS 4.21 Arista EOS 4.21.0 Arista EOS 4.21.0F Arista EOS 4.21.1F Arista EOS 4.21.2.4 Arista EOS 4.21.3 Arista EOS 4.21.3F Arista EOS 4.21.4.1F Arista EOS 4.21.8 Arista EOS 4.21.8M Arista EOS 4.21.9M Arista EOS 4.21.11M Arista EOS 4.21.12M Arista EOS 4.21.13M Arista EOS 4.21.14M Arista EOS 4.22 Arista EOS 4.22.0F Arista EOS 4.22.1F Arista EOS 4.22.3M Arista EOS 4.22.4M Arista EOS 4.22.6M Arista EOS 4.22.7M Arista EOS 4.22.8.1F Arista EOS 4.22.9M Arista EOS 4.23 Arista EOS 4.23.0F Arista EOS 4.23.1F Arista EOS 4.23.2F Arista EOS 4.23.3M Arista EOS 4.23.4M Arista EOS 4.23.5M Arista EOS 4.23.6M Arista EOS 4.23.7M Arista EOS 4.23.9 Arista EOS 4.23.9M Arista EOS 4.23.10 Arista EOS 4.23.13M Arista EOS 4.24 Arista EOS 4.24.0 Arista EOS 4.24.0F Arista EOS 4.24.2.1F Arista EOS 4.24.2.4F Arista EOS 4.24.2F Arista EOS 4.24.3.1M Arista EOS 4.24.5M Arista EOS 4.24.7 Arista EOS 4.24.7M Arista EOS 4.24.8 Arista EOS 4.24.9 Arista EOS 4.24.10 Arista EOS 4.24.10M Arista EOS 4.24.11M Arista EOS 4.25 Arista EOS 4.25.0 Arista EOS 4.25.1F Arista EOS 4.25.2F Arista EOS 4.25.4 Arista EOS 4.25.5 Arista EOS 4.25.5.1M Arista EOS 4.25.6 Arista EOS 4.25.8 Arista EOS 4.25.9 Arista EOS 4.25.9M Arista EOS 4.25.10M Arista EOS 4.26.0 Arista EOS 4.26.1 Arista EOS 4.26.1F Arista EOS 4.26.2 Arista EOS 4.26.2F Arista EOS 4.26.3M Arista EOS 4.26.4 Arista EOS 4.26.4M Arista EOS 4.26.5 Arista EOS 4.26.6 Arista EOS 4.26.8M Arista EOS 4.26.9M Arista EOS 4.27.0 Arista EOS 4.27.0F Arista EOS 4.27.1 Arista EOS 4.27.1F Arista EOS 4.27.3 Arista EOS 4.27.4 Arista EOS 4.27.6M Arista EOS 4.27.7M Arista EOS 4.27.9M Arista EOS 4.28.0 Arista EOS 4.28.3M Arista EOS 4.28.4M Arista EOS 4.28.6M Arista EOS 4.29.0	141
Application	Arista Arista Ceos - Arista Cloudeos - Arista Veos -	3
Hardware	Arista Arista 7010T - Arista 7010T 48 - Arista 7010Tx 48 - Arista 7010Tx 48 DC - Arista 7020R - Arista 7020Sr 24C2 - Arista 7020Sr 32C2 - Arista 7020Tr 48 - Arista 7020Tra 48 - Arista 7050Cx3 32S - Arista 7050Cx3M 32S - Arista 7050Qx 32S - Arista 7050Qx2 32S - Arista 7050Sx 128 - Arista 7050Sx 64 - Arista 7050Sx 72Q - Arista 7050Sx2 128 - Arista 7050Sx2 72Q - Arista 7050Sx3 48C8 - Arista 7050Sx3 48Yc - Arista 7050Sx3 48Yc12 - Arista 7050Sx3 48Yc8 - Arista 7050Sx3 96Yc8 - Arista 7050Tx 48 - Arista 7050Tx 64 - Arista 7050Tx 72Q - Arista 7050Tx2 128 - Arista 7050Tx3 48C8 - Arista 7060Cx 32S - Arista 7060Cx2 32S - Arista 7060Dx4 32 - Arista 7060Px4 32 - Arista 7060Sx2 48Yc6 - Arista 7130 - Arista 7130 16G3S - Arista 7130 48G3S - Arista 7130 96S - Arista 7150S 24 - Arista 7150S 52 - Arista 7150S 64 - Arista 7150Sc 24 - Arista 7150Sc 64 - Arista 7160 32Cq - Arista 7160 48Tc6 - Arista 7160 48Yc6 - Arista 7170 32C - Arista 7170 32Cd - Arista 7170 64C - Arista 7170B 64C - Arista 720Df 48Y - Arista 720Dp 24S - Arista 720Dp 48S - Arista 720Dt 24S - Arista 720Dt 48S - Arista 720Dt 48Y - Arista 720Xp 24Y6 - Arista 720Xp 24Zy4 - Arista 720Xp 48Y6 - Arista 720Xp 48Zc2 - Arista 720Xp 96Zc2 - Arista 722Xpm 48Y4 - Arista 722Xpm 48Zy8 - Arista 7250Qx 64 - Arista 7260Cx - Arista 7260Cx3 - Arista 7260Cx3 64 - Arista 7260Qx - Arista 7260Qx 64 - Arista 7260Sx2 - Arista 7280E - Arista 7280R2 - Arista 7280R3 - Arista 7300X 32Q - Arista 7300X 64S - Arista 7300X 64T - Arista 7300X3 32C - Arista 7300X3 48Yc4 - Arista 7320X 32C - Arista 7358X4 - Arista 7368X4 - Arista 7388X5 - Arista 750 - Arista 7500E - Arista 7500R - Arista 7500R2 - Arista 7500R3 - Arista 7500R3 24D - Arista 7500R3 24P - Arista 7500R3 36Cq - Arista 7500R3K 36Cq - Arista 7800R3 36P - Arista 7800R3 48Cq - Arista 7800R3K 48Cq -	93

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

References

https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087